https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 15:31:33 +0000 https://vulnerability.circl.lu/vuln/cve-2026-57432 <p><strong>Affected:</strong> perl</p> <p>Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpack.</p> <p>S_measure_struct adds each item&#39;s size times its repeat count to a running total with no overflow check, so a large repeat count in a pack or unpack template wraps the signed SSize_t total negative. The @, X, and x position codes then guard their moves with a signed length comparison that passes when the length is negative, advancing the buffer pointer out of bounds.</p> <p>A template derived from untrusted input can read heap memory past the buffer and return it to the caller.</p> <p><strong>Affected:</strong> perl</p> <p>Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpack.</p> <p>S_measure_struct adds each item&#39;s size times its repeat count to a running total with no overflow check, so a large repeat count in a pack or unpack template wraps the signed SSize_t total negative. The @, X, and x position codes then guard their moves with a signed length comparison that passes when the length is negative, advancing the buffer pointer out of bounds.</p> <p>A template derived from untrusted input can read heap memory past the buffer and return it to the caller.</p> https://vulnerability.circl.lu/vuln/cve-2026-57432